Home Malware Programs Potentially Unwanted Programs (PUPs) GoUnzip Toolbar

GoUnzip Toolbar

Posted: May 7, 2015

Threat Metric

Ranking: 6,618
Threat Level: 1/10
Infected PCs: 5,382
First Seen: May 7, 2015
Last Seen: October 16, 2023
OS(es) Affected: Windows

GoUnzip Toolbar is another product created and developed by Mindspark Interactive Network Inc. GoUnzip Toolbar is classified a Potentially Unwanted Program (PUP) with adware capabilities that often comes bundled with free third-party applications. Once installed, the GoUnzip Toolbar may modify your default homepage and search engine. Typically, GoUnzip Toolbar switches your search engine with a low-level one that provides unreliable results. Search results by GoUnzip Toolbar are considered unreliable as this PUP is known to collect information related to your online activities. In addition, search results are not genuine since low-level search engines are supported mainly by third-parties that require online traffic in return. Therefore, any unexpected redirects should not be a surprise to you. In addition, you may notice plenty of unwanted commercial advertisements that may disrupt your normal browsing experience.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

CLSID{0046fa61-223b-475e-870f-138ddd2013f5}{0415392C-284E-4DBA-8D2F-A000FF897546}{05b46e05-86a6-48b0-a5ed-f79eff8f0924}{0FD96305-E9CA-417B-8DFC-83ECCD9DCF68}{11610552-F24E-4635-8931-EEFDA6618421}{13FB1E8B-152B-4603-99FD-00E7CE6D61AD}{1499169E-A959-4A51-B375-1E1E6FCEB8C4}{16444927-DA35-4D55-8E7B-B6C440BDDB58}{1fde9fb4-2eae-433d-b021-68666f3a1699}{2372ED33-3368-4EC9-8112-D41B97914A49}{2aef9dbe-56f3-4154-8a9d-c5d2cd13476b}{400dfae6-0204-4155-b85f-7b656b7443ee}{440a5b60-4fbe-4e2c-96a7-e1573db35334}{5128C8A6-8D18-4067-8E7B-046FF6A07A6F}{5BFCE2F2-A62F-4AF7-A474-83F46A68F42E}{63207481-d404-48dc-a7c7-3c3c52c6683f}{64FE4797-1813-441E-BEBC-748A0C96645C}{66973061-927F-43BE-ADD0-B8957932EA9A}{73E54D93-7C6D-49AE-9AA9-157E106751C5}{76CFE6F4-BCC8-4DB7-8D05-9F57E4AAA9C4}{7F80D3E9-E102-4004-B0E7-89F173D7B85B}{7F8EB933-4366-4606-8E3C-AE77D483778E}{90E8D47B-916F-4C4C-83CF-05E962F21A47}{A66D4EF2-181F-4DE5-A6EC-C8734FC728F3}{ADD40C7D-CE51-4BC5-ABF2-90A5199E687B}{B4B48DFD-88FC-44F0-B496-3C9DE7CB008F}{B6713460-2792-4CA4-A478-163A8B9A26C9}{C2BC6C7D-421E-4123-8A8D-F51CFCA381DF}{c793a002-eec0-4dde-92cf-0b13a4496031}{C8BD573B-0524-49A1-815B-70D1984CF083}{CF993DB0-AF4B-47AA-A7C4-BFBA779B8847}{d09c48b8-c9b4-4d2d-9071-50cdddadbb4e}{E46D3E7C-610D-40AC-9906-F693C8DA6BA1}{e83623c9-0135-4be3-9d80-789681079155}{e875ed57-9b60-4cae-a15c-309427e58790}{EE28F2FE-7CCF-46AE-9C4F-770E02BE2A3D}{F7C60F1D-7680-4EAC-8AC7-BD381BDBBD17}{F99DC480-C017-48EA-B9BD-DB79EDF8EA75}{FBFDCBBC-3C53-48AA-AE9B-88E5FAC5B851}File name without pathGoUnzip.lnkhttp_gounzip.dl.myway.com_0.localstoragehttp_gounzip.dl.myway.com_0.localstorage-journalhttp_gounzip.dl.tb.ask.com_0.localstoragehttp_gounzip.dl.tb.ask.com_0.localstorage-journalHKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\GoUnzip_dmSOFTWARE\Classes\TooltabExtension.GoUnzipSOFTWARE\Classes\TooltabExtension.GoUnzip.1Software\GoUnzipSoftware\Microsoft\Internet Explorer\Approved Extensions\{1FDE9FB4-2EAE-433D-B021-68666F3A1699}Software\Microsoft\Internet Explorer\Approved Extensions\{2AEF9DBE-56F3-4154-8A9D-C5D2CD13476B}Software\Microsoft\Internet Explorer\Approved Extensions\{D09C48B8-C9B4-4D2D-9071-50CDDDADBB4E}Software\Microsoft\Internet Explorer\SearchScopes\{1f7376f6-0263-42fe-84b1-2fa7d31434fa}SOFTWARE\Microsoft\Internet Explorer\Toolbar\{2AEF9DBE-56F3-4154-8A9D-C5D2CD13476B}SOFTWARE\Microsoft\Tracing\GoUnzip_RASAPI32SOFTWARE\Microsoft\Tracing\GoUnzip_RASMANCSSOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{1fde9fb4-2eae-433d-b021-68666f3a1699}SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{d09c48b8-c9b4-4d2d-9071-50cdddadbb4e}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1FDE9FB4-2EAE-433D-B021-68666F3A1699}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2AEF9DBE-56F3-4154-8A9D-C5D2CD13476B}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D09C48B8-C9B4-4D2D-9071-50CDDDADBB4E}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FDE9FB4-2EAE-433D-B021-68666F3A1699}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2AEF9DBE-56F3-4154-8A9D-C5D2CD13476B}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D09C48B8-C9B4-4D2D-9071-50CDDDADBB4E}SOFTWARE\Microsoft\Windows\CurrentVersion\Run\GoUnzipSOFTWARE\Microsoft\Windows\CurrentVersion\Run\GoUnzip AppIntegrator 32-bitSOFTWARE\Microsoft\Windows\CurrentVersion\Run\GoUnzip AppIntegrator 64-bitSOFTWARE\Microsoft\Windows\CurrentVersion\Run\GoUnzip EPM SupportSOFTWARE\Microsoft\Windows\CurrentVersion\Run\GoUnzip Search Scope MonitorSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{1f7376f6-0263-42fe-84b1-2fa7d31434fa}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{2AEF9DBE-56F3-4154-8A9D-C5D2CD13476B}SOFTWARE\Wow6432Node\Microsoft\Tracing\GoUnzip_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\GoUnzip_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{1fde9fb4-2eae-433d-b021-68666f3a1699}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{d09c48b8-c9b4-4d2d-9071-50cdddadbb4e}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\GoUnzipSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\GoUnzip AppIntegrator 32-bitSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\GoUnzip AppIntegrator 64-bitSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\GoUnzip EPM SupportSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\GoUnzip Search Scope MonitorHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}GoUnzip_dmbar Uninstall Internet ExplorerGoUnzipTooltab Uninstall Internet ExplorerMindspark GoUnzip

Additional Information

The following directories were created:
%APPDATA%\Microsoft\Windows\Start Menu\Programs\GoUnzip%LOCALAPPDATA%\GoUnzipTooltab%UserProfile%\Local Settings\Application Data\GoUnzipTooltab
Loading...